Re: PHP: Calendar Buffer Overflow

[Stefan Esser <sesser () php net>]

Martin Pitt wrote:

> Of course that is a bug that should be fixed in CVS head, but I think
> it's not exploitable, so it does not require a security update as far
> as I can see.
>  
This bug was fixed in the PHP CVS 16 month ago for the PHP 5 branch, but 
was not commited to the PHP 4_3 branch until 2 month ago. This means the 
fix will be in the upcoming PHP 4.4.

Greets,
Stefan Esser
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/